Skip to content

v1.2.0

Choose a tag to compare

View all tags
@the-kizz the-kizz released this 24 Apr 03:47
· 45 commits to master since this release
v1.2.0
97a5e0a

HomeKeep v1.2.0 — Red Team Audit & Public-Facing Hardening

34/35 REQs shipped across 7 phases (HOTFIX-03 PAT rotation deferred):

  • Phase 22 HOTFIX: /_ admin blocked, secrets rotated
  • Phase 23 SEC: filter-injection sweep, PB rule gap, timing-safe compare,
    IDOR fix, password min 12, proxy refresh
  • Phase 24 HDR: CSP Report-Only, HSTS, X-Frame, Permissions-Policy +
    CSP report endpoint + HK_BUILD_STEALTH
  • Phase 25 RATE: row quotas (5 homes/500 tasks/10 areas), signup 10/60s,
    invite lockout, auth 20/60s, ntfy topic 12+digit
  • Phase 26 DEMO: docker-compose.demo.yml, ephemeral per-visitor home,
    2h/24h TTL cleanup, homekeep.demo.kizz.space ready
  • Phase 27 SUPPLY: cosign keyless, SBOM, SLSA-3 provenance, SHA-pinned
    actions, digest-pinned bases, dev-pb checksum, telemetry off
  • Phase 28 SECDOC: SECURITY.md, operator hardening checklist,
    SPEC.md v0.5 changelog

672/672 tests green. Full audit: .planning/v1.2-security-MILESTONE-AUDIT.md
Verify image: cosign verify ghcr.io/conroyke56/homekeep:v1.2.0
--certificate-identity-regexp "^https://github.com/conroyke56/homekeep/.github/workflows/release.yml@.+"
--certificate-oidc-issuer https://token.actions.githubusercontent.com

Assets 2
Loading